Government-grade identity for the documents that need it
Some contracts need more than a code. sign.yt connects to Węzeł Podpisu and to qualified trust service providers, so signers can use the identity tools they already have.
Węzeł Podpisu inside the signing flow
For each recipient you can pick a Węzeł Podpisu method: Profil Zaufany, e-dowód, personal signature (podpis osobisty), mObywatel or a qualified signature. The recipient is redirected to the government flow, signs there, and sign.yt stores the signed PDF and moves the document to the next signer.
Parallel and sequential signing orders work the same way as with regular signatures.
Qualified electronic signatures
A qualified signature (QES) is the eIDAS level equal to a handwritten signature. sign.yt supports two paths: remote signing at a qualified provider through the Cloud Signature Consortium API, or upload, where the signer signs the PDF with any QES tool and uploads it back.
Remote signing works with providers that expose a CSC v2 endpoint. The upload path works with smart cards, cloud certificates and other qualified tools, so the signer is not tied to one vendor.
Earlier signatures stay intact
Qualified signatures are added incrementally to the latest revision of the document. Uploaded files are accepted only if they extend the exact bytes sign.yt sent, and the signing certificate must be listed as qualified on the EU trusted list.
That means you can combine methods on one document: one party signs with Profil Zaufany, another with a qualified certificate, and a third with a regular sign.yt signature, while the audit trail records each step.
Frequently asked questions
Do I need a qualified signature?
Only where the law requires written form or your counterparty asks for it. For most commercial agreements a regular electronic signature with verification is enough. Check with your lawyer for specific cases.
Does the signer pay anything?
Profil Zaufany, e-dowód and mObywatel are the signer's own government tools. Qualified certificates are issued by trust service providers on their own terms.
Is this available on every account?
Węzeł Podpisu and qualified provider connections are enabled per organization. Contact sales@sign.yt to set them up.
Which qualified tools work with the upload path?
Any tool that produces a PAdES qualified signature recognised on the EU trusted list, for example a smart card or a cloud certificate.
More features
- Audit trail
Every action is logged in an append-only, hash-chained audit log. Signatures are chained per document and a certificate of completion is added to each PDF.
- GDPR compliance
Data export and erasure requests handled in the product, PDFs encrypted at rest with a separate key per organization, and strict tenant isolation.
- PAdES signatures
Every signer gets a cryptographic PAdES signature in the PDF, plus a final platform seal and a certificate of completion. Any change after signing shows.